Cyber Incident Victim: Israel Defense Forces
Date:
Aug 2014
Location:
Israel
Summary
Hackers associated with Anonymous disrupted key Israeli government websites, including those of the military, the central bank, and the Prime Minister's office, in retaliation for the alleged suspension of the group's social media accounts. The attackers publicly listed the compromised sites via Pastebin, citing solidarity with Gaza and aiming to halt regional hostilities, while emphasizing the persistence of their campaign despite individual setbacks. The military's website remained offline following the breach, compounding prior disruptions such as a separate Twitter account hijacking by another hacker group that spread false warnings about a nuclear incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On August 24-25, 2014, hackers identifying as Anonymous and AntiSec executed cyberattacks against critical Israeli government websites, including the Israel Defense Forces (idf.gov.il), the Bank of Israel, and the Israeli Prime Minister's site. The attackers publicly claimed responsibility through a Pastebin post published under the AntiSec alias, framing the operation as retaliation for the alleged shutdown of Anonymous-affiliated social media accounts and an act of solidarity with Gaza amid regional hostilities. They employed distributed denial-of-service (DDoS) techniques to disrupt services, rendering several sites inaccessible. The IDF website remained offline during the immediate aftermath of the attack, as confirmed by Anonymous via a Twitter post on August 25 linking to a "Tango Down" notice. The Pastebin statement emphasized the collective resolve of the hacktivist movement, quoting, "You never know what results will come from your action. But if you do nothing, there will be no result," while warning that individual arrests would not halt their campaigns.
The incident caused sustained disruptions to Israel’s digital infrastructure, with IDF online services particularly impacted. This attack followed a pattern of prior compromises against IDF assets, including a July 2014 breach by the Syrian Electronic Army that hijacked the IDF’s Twitter account to disseminate false warnings of a nuclear leak after rocket strikes targeted the Dimona facility. No mitigation efforts or restoration timelines from Israeli authorities were disclosed in the source material. The attackers did not claim data theft or defacement, focusing instead on service disruption to amplify their political message opposing Israeli military operations in Gaza. The operational branding #OpSaveGaza and coordination through Anonymous’ global social media channels underscored the campaign’s intent to link cyber actions to geopolitical tensions.